PT-2010-2990 · Adobe · Acrobat+1

Published 2010-06-30 · Updated 2018-10-30 · CVE-2010-1285

NVD

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201.

Fix

RCE

Weakness Enumeration

CWE-399

CWE-20

Related Identifiers

CVE-2010-1285

RHSA-2010:0503

Affected Products

Acrobat

Acrobat Reader

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2010-1285 · Security Note
• http://adobe.com/support/security/bulletins/apsb10-15.html · Vendor Advisory
• http://securityfocus.com/bid/41232 · Note
• http://securityfocus.com/archive/1/512099 · Note
• http://vupen.com/english/advisories/2010/1636 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6725 · Note
• http://securitytracker.com/id?1024159 · Note